My guess is it is triangle routing.
Packets leaving the OPNSense device head likely straight to the .10.x destination.
Packets leaving the .10.x towards the vpn go via the Mikrotik then the OPNSense.
The Mikrotik will generally drop these packets. (By default they have a drop invalid rule)
You could customize this rule to not drop packets between the vpn and internal networks.
Alternatively you could reconfigure the network to make the packets go back the way they came.
Perhaps by putting OPNSense device on its own subnet as the only client.
Packets leaving the OPNSense device head likely straight to the .10.x destination.
Packets leaving the .10.x towards the vpn go via the Mikrotik then the OPNSense.
The Mikrotik will generally drop these packets. (By default they have a drop invalid rule)
You could customize this rule to not drop packets between the vpn and internal networks.
Alternatively you could reconfigure the network to make the packets go back the way they came.
Perhaps by putting OPNSense device on its own subnet as the only client.
Statistics: Posted by rplant — Fri Feb 02, 2024 4:17 am